Examkin

Question

Difficulty: EasyUsers and Groups in Microsoft Entra ID

You plan to configure a new Microsoft Entra ID group that will automatically include all user accounts where the department attribute is set to Sales. Which two settings must you configure to meet this requirement? (Select TWO)

  1. Set the Membership type to Dynamic User.Answer
  2. B
    Set the Membership type to Dynamic Device.
  3. Add a dynamic membership rule with the query: (user.department -eq "Sales").Answer
  4. D
    Add a dynamic membership rule with the query: (device.department -eq "Sales").

Answer

To configure a group that dynamically includes users based on their department, you must set the membership type to Dynamic User and construct a query targeting the user's department attribute, specifically using the syntax: (user.department -eq "Sales").
Configuring a dynamic membership rule for user accounts requires setting the membership type of the group to Dynamic User. To filter by the user's department, you must use the user.department attribute in the query syntax. Therefore, setting the membership type to Dynamic User and adding the query matching user.department to Sales are the correct configurations.

Step-by-Step Solution

1
Set the group's membership type to Dynamic User.
The group is configured to dynamically evaluate user objects rather than device objects or static assignments.
The requirement is to automatically include user accounts based on a user attribute.
2
Create a dynamic membership query using the user.department attribute.
The query (user.department -eq "Sales") is added.
This query evaluates each user's department attribute and adds them to the group if it matches Sales.

Key Concept

Configuring dynamic user membership groups based on user attributes in Microsoft Entra ID
Rate this question

Topics

Users and Groups in Microsoft Entra ID

More questions from this topic